Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 997 / 2164

1-3
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Management Access
Configuring ASA Access for ASDM, Telnet, or SSH
•
(9.0(2) and later) The default Telnet login password was removed; you must manually set the
password before using Telnet. See the
“Setting the Login Password” section on page 16-2 .
•
If you cannot make a Telnet or SSH connection to the ASA interface, make sure that you have
enabled Telnet or SSH to the ASA according to the instructions in the
“Configuring ASA Access for
ASDM, Telnet, or SSH” section on page 1-1 .
Configuring Telnet Access
To identify the client IP addresses allowed to connect to the ASA using Telnet, perform the following
steps.
Detailed Steps
Examples
The following example shows how to let a host on the inside interface with an address of 192.168.1.2
access the ASA:
hostname(config)# telnet 192.168.1.2 255.255.255.255 inside
The following example shows how to allow all users on the 192.168.3.0 network to access the ASA on
the inside interface:
hostname(config)#
telnet 192.168.3.0 255.255.255.0 inside
Using a Telnet Client
To gain access to the ASA CLI using Telnet, enter the login password set by the password command.
(9.0(2) and later) The default Telnet login password was removed; you must manually set the password
before using Telnet. See the
“Setting the Login Password” section on page 16-2 .
Command Purpose
Step 1
telnet source_IP_address mask
source_interface
Example:
hostname(config)# telnet 192.168.1.2
255.255.255.255 inside
For each address or subnet, identifies the IP addresses from
which the ASA accepts connections.
If there is only one interface, you can configure Telnet to access
that interface as long as the interface has a security level of 100.
Step 2
telnet timeout minutes
Example:
hostname(config)# telnet timeout 30
Sets the duration for how long a Telnet session can be idle
before the ASA disconnects the session.
Set the timeout from 1 to 1440 minutes. The default is 5
minutes. The default duration is too short in most cases and
should be increased until all pre-production testing and
troubleshooting have been completed.